(19) 



J 



Europsisc 




(12) 



(43) Date of publication: 

08. 1 1 .2000 B u I leti n 2000/45 



isches Patentamt 
European Patent Office 
Office europeen des brevets (-j ^ EP 1 050 887 A1 

EUROPEAN PATENT APPLICATION 

(51) mtci. 7 : G11C 16/22, G06F 12/14 



(21) Application number: 00108785.7 

(22) Date of filing: 25.04.2000 



00 
00 

o 
in 
o 

CL 
LU 



(84) Designated Contracting States: 

AT BE CH CY DE DK ES Fl FR GB GR IE IT LI LU 
MC NL PT SE 

Designated Extension States: 
AL LT LV MK RO SI 

(30) Priority: 27.04.1999 JP 11944199 
28.12.1999 JP 37478899 

(71) Applicant: 

Matsushita Electric Industrial Co., Ltd. 
Kadoma-shi, Osaka 571-8501 (JP) 

(72) Inventors: 

• Hirota, Teruto 
Osaka-fu 570-0015 (JP) 



• Tatebayashi, Makoto 
Hyogo-ken 665-0852 (JP) 

• Yagawa, Talhei 
Nara-ken 631-0061 (JP) 

• Minami, Masataka 
California 91504 (US) 

• Kozuka, Masayuki 
California 91008 (US) 

(74) Representative: 

Grunecker, Kinkeldey, 
Stockmair & Schwanhausser 
Anwaltssozietat 
Maximilianstrasse 58 
80538 Munchen (DE) 



(54) Semiconductor memory card and data reading apparatus 



(57) A semiconductor memory card comprising a 
control IC 302, a flash memory 303, and a ROM 304. 
The ROM 304 holds information such as a medium ID 
341 unique to the semiconductor memory card. The 
flash memory 303 includes an authentication memory 
332 and a non-authentication memory 331 . The authen- 
tication memory 332 can be accessed only by external 
devices which have been affirmatively authenticated. 
The non-authentication memory 331 can be accessed 
by external devices whether the external devices have 
been affirmatively authenticated or not. The control IC 
302 includes control units 325 and 326, an authentica- 
tion unit 321 and the like. The control units 325 and 326 
control accesses to the authentication memory 332 and 
the non-authentication memory 331, respectively. The 
authentication unit 321 executes a mutual authentica- 
tion with an external device. 



FIG. 5 




BEST AVAILABLE COP'' 



109 



SEMICONDUCTOR MEM ORY CARD 

3Z3 j coMtroUC 



CLOCK 



QDMUASD 




SPECIAL AREA) 

/ 342 

fMAKERlT 
[NAME_ 



JCATION :AV2]ffiNTI-! 
•AREA 

'fl^memory 



Printed by Xerox (UK) Business Services 
2.16.7 (HRS)/3.6 



BNSDOCID: <EP 1050887A1 I > 



EP 1 050 887 A1 



Description 

BACKGROUND OF THE INVENTION 

(1) Field of the Invention 

[0001] The present invention relates to a semicon- 
ductor memory card tor storing digital contents, and a 
data reading apparatus for reading out the digital con- 
tents from the semiconductor memory card. More par- 
ticularly, the present invention relates to a 
semiconductor memory card and a data reading appa- 
ratus suitable for copyright protection of digital contents. 

(2) Description of the Prior Art 

[0002] The multimedia network technology has 
developed to the extent that digital contents such as 
music contents are distributed via a communication net- 
work such as the Internet. This makes it possible to 
access a variety of music or the like provided from 
around the world at home. For example, a music con- 
tent can be downloaded into a personal computer (here- 
after referred to as PC), then stored in a semiconductor 
memory card loaded into the PC. Also, the semiconduc- 
tor memory card can be removed from the PC and can 
be loaded into a portable music player. This enables 
one to listen to the music while walking. The semicon- 
ductor memory cards are compact and lightweight 
cards containing a semiconductor memory (e.g., a flash 
memory) being nonvolatile and having a large storage 
capacity. 

[0003] In such a music distribution, the digital con- 
tents to be stored in the semiconductor memory card 
need to be encrypted beforehand using a key or the like 
to prevent unauthorized copying of the digital contents. 
Also, an arrangement is required so that file manage- 
ment software programs, many of which are standard 
equipments on commercial PCs, cannot copy the digital 
contents to other storage mediums. 
[0004] In one possible method for preventing unau- 
thorized copying, only dedicated software programs are 
allowed to access the semiconductor memory card. For 
example, when an authentication process between a 
PC and a semiconductor memory card has completed 
affirmatively, a PC is allowed to access the semiconduc- 
tor memory card; and when the authentication process 
has not completed affirmatively due to the lack of a ded- 
icated software program, the PC is not allowed to 
access the semiconductor memory card. 
[0005] However, in the above method in which PCs 
should always have a dedicated software program to 
access the semiconductor memory card, free data 
'exchange with users via the semiconductor memory 
card is not available. As a result, the above method 
loses a merit of conventional semiconductor memory 
cards, namely, a merit that file management software 
programs being standard equipments on commercial 



PCs can be used to access the semiconductor memory 
card. 

[0006] Semiconductor memory cards that can only 
be accessed through dedicated software programs are 

5 superior as storage mediums for storing digital contents 
since such semiconductor memory cards function to 
protect copyright of the digital contents. However, the 
semiconductor memory cards have a problem that they 
cannot be used as auxiliary storage apparatuses in 

io general-purpose computer systems. 

SUMMARY OF THE INVENTION 

[0007] It is therefore an object of the present inven- 
ts tion to provide a semiconductor memory card that can 
be used as a storage medium for storing digital contents 
and as a storage medium for storing general-purpose 
computer data (not an object of copyright protection), 
and to provide an apparatus for reading data from the 
20 storage medium. 

[0008] The above object is fulfilled by a semicon- 
ductor memory card that can be used/removed in/from 
an electronic device, comprising: a rewritable nonvola- 
tile memory; and a control circuit which controls 
25 accesses by the electronic device to an authentication 
area and a non-authentication area in the rewritable 
nonvolatile memory, wherein the control circuit includes: 
a non-authentication area access control unit which 
controls accesses by the electronic device to the non- 
30 authentication area; an authentication unit which per- 
forms an authentication process to check whether the 
electronic device is proper, and affirmatively authenti- 
cates the electronic device when the electronic device is 
proper; and an authentication area access control unit 
35 which permits the electronic device to access the 
authentication area only when the authentication unit 
affirmatively authenticates the electronic device. 
[0009] With the above construction, the data being 
an object of copyright protection can be stored in the 
40 authentication area and other data can be stored in the 
non-authentication area, which makes it possible to 
achieve such a semiconductor memory card as can 
store both digital contents to be copyright-protected and 
other data together. 
45 [0010] In the above semiconductor memory card, 
the authentication unit may generate a key reflecting a 
result of the authentication process, and the authentica- 
tion area access control unit decrypts an encrypted 
instruction using the key generated by the authentica- 
50 tion unit and controls accesses by the electronic device 
to the authentication area in accordance with the 
decrypted instruction, the encrypted instruction being 
sent from the electronic device. 

[0011] With the above construction, even if the 
55 communication between the semiconductor memory 
card and an electronic device is tapped, the instruction 
to access the authentication area has been encrypted, 
reflecting the result of the preceding authentication. 
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Accordingly, such a semiconductor memory card has a 
reliable function to protect the authentication area from 
being unlawfully accessed. 

[0012] in the above semiconductor memory card, 
the authentication unit, may perform a challenge- 
response type mutual authentication with the electronic 
device, and generates the key from challenge data and 
response data, the challenge data being sent to the 
electronic device to check whether the electronic device 
is proper, and the response data being generated to 
show the authentication unit is proper. 
[0013] With the above construction, the key is 
shared by the semiconductor memory card and the 
electronic device only when both devices affirmatively 
authenticate each other. Furthermore, the key changes 
for each authentication. This enhances the security of 
the authentication area since the authentication area 
cannot be accessed without using the key. 
[0014] In the above semiconductor memory card, 
the encrypted instruction sent from the electronic device 
may include a tag field and an address field, the tag field 
not having been encrypted and specifying a type of an 
access to the authentication area, the address field hav- 
ing been encrypted and specifying an address of an 
area to be accessed, wherein the authentication area 
access control unit decrypts the address field using the 
key, and controls accesses by the electronic device to 
the authentication area so that an access of the type 
specified in the tag field is made to the area indicated by 
the address in the decrypted address field. 
[0015] With the above construction, only the 
address field of the instruction is encrypted. This facili- 
tates the decryption and the decoding of the instruction 
by the semiconductor memory card which receives the 
instruction. 

[001 6] The above semiconductor memory card may 
further comprise: an identification data storage circuit 
which prestores identification data which is unique to 
the semiconductor memory card and enables the semi- 
conductor memory card to be discriminated from other 
semiconductor memory cards, wherein the authentica- 
tion unit performs a mutual authentication with the elec- 
tronic device using the identification data stored in the 
identification data storage circuit, and generates the key 
from the identification data. 

[0017] With the above construction, in the mutual 
authentication process, data unique to each semicon- 
ductor memory card is exchanged. This keeps a supe- 
rior level security against unlawful decoding of the 
mutual authentication. 

[0018] The above semiconductor memory card may 
further comprise: an area resizing circuit which resizes 
the authentication area and the non-authentication 
area. 

[0019] With the above construction, the semicon- 
ductor memory card can be used dynamically. That is, 
the semiconductor memory card can be used mainly as 
a record medium for digital contents and can be used as 



an auxiliary storage apparatus in a commuter system. 
[0020] In the above semiconductor memory card, 
the authentication area and the non-authentication area 
may be produced by dividing a continuous area of a pre- 
5 determined size in the rewritable nonvolatile memory 
into two, and the area resizing circuit resizes the 
authentication area and the non-authentication area by 
changing an address marking a boundary between the 
authentication area and the non-authentication area. 
w [0021] With the above construction, the size of the 
authentication and n on -authentication areas can be 
changed only by moving the boundary. This reduces the 
circuit size. 

[0022] In the above semiconductor memory card, 
is the area resizing circuit may include: an authentication 
area conversion table which shows correspondence 
between logical addresses and physical addresses in 
the authentication area; a non-authentication area con- 
version table which shows correspondence between 
20 logical addresses and physical addresses in the non- 
authentication area; and a conversion table change unit 
which changes contents of the authentication area con- 
version table and the non-authentication area conver- 
sion table in accordance with an instruction from the 
25 electronic device, wherein the authentication area 
access control unit controls accesses by the electronic 
device to the authentication area by referring to the 
authentication area conversion table, and the non- 
authentication area access control unit controls 
30 accesses by the electronic device to the non-authenti- 
cation area by referring to the non-authentication area 
conversion table. 

[0023] With the above construction, it is possible to 
separately manage the authentication area and the 
35 non-authentication area in terms of the area size and 
relationships between the logical addresses and physi- 
cal addresses since conversion tables for these areas 
are independently operated. 

[0024] In the above semiconductor memory card, 
40 an area addressed with higher physical addresses and 
an area addressed with lower physical addresses both 
constituting the area having the predetermined size 
may be respectively allocated to the authentication area 
and the non-authentication area, the non-authentication 
45 area conversion table shows correspondence between 
logical addresses arranged in ascending order and 
physical addresses arranged in ascending order, and 
the authentication area conversion table shows corre- 
spondence between logical addresses arranged in 
so ascending order and physical addresses arranged in 
descending order. 

[0025] With the above construction which enables 
the logical addresses to be used in ascending order, the 
area size can be changed easily since the probability of 
55 use of an area around the boundary between the 
authentication area and the non-authentication area 
becomes low. This also lowers the probability of occur- 
rence of data saving or moving which is required to 
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move the boundary, resulting in a simplified area size 
change. 

[0026] The above semiconductor memory card may 
further comprise: a read-only memory circuit which 
p restores data. 5 
[0027] With the above construction, the function of 
copyright protection is enhanced by storing identifica- 
tion data of the semiconductor memory card in the ded- 
icated memory and storing the digital contents 
depending on the results of identification based on the w 
identification data. 

[0028] In the above semiconductor memory card, 
each of the authentication area and the non-authentica- 
tion area may include: a read/write storage area from/to 
which the electronic device can read/write data; and a 15 
read-only storage area from which the electronic device 
can read data but to which the electronic device cannot 
write data, the control circuit further includes: a random 
number generator which generates a random number 
each time the electronic device writes data to the rewri- 20 
table nonvolatile memory, and each of the authentica- 
tion area access control unit and the non-authentication 
area access control unit encrypts data using the ran- 
dom number, writes the encrypted data to the read/write 
storage area, and writes the random number to the 25 
read-only storage area. 

[0029] With the above construction, unlawful 
attempts such as tampering of the read/write storage 
area can be detected by checking the compatibility with 
the random number stored in the read-only storage 30 
area. This enhances the safety of data writing. 
[0030] In the above semiconductor memory card, 
the control circuit further may include: a conversion 
table which shows correspondence between logical 
addresses and physical addresses in each of the 35 
authentication area and the non-authentication area; 
and a conversion table change circuit which changes 
contents of the conversion table in accordance with an 
instruction from the electronic device, and the authenti- 
cation area access control unit and the non-authentica- 40 
tion area access control unit control accesses by the 
electronic device to the authentication area and the 
non-authentication area, respectively, by referring to the 
conversion table. 

[0031] With the above construction, even if the plu- 45 
rality of logical blocks constituting the same file are frag- 
mented, they can be easily changed to become logically 
successive. This increases the speed of accessing the 
same file. 

[0032] In the above semiconductor memory card, 50 
the control circuit may further include: an encryp- 
tion/decryption unit which encrypts data to be written to 
the authentication area and the non-authentication area 
and decrypts data read out from the authentication area 
and the non-authentication area. 55 
[0033] With the above construction, it is possible to 
defend the authentication area and the non-authentica- 
tion area against unlawful attacks such as destroying 



the semiconductor memory card and directly reading 
the contents of these areas. 

[0034] In the above semiconductor memory card, 
the nonvolatile memory may be a flash memory, and the 
control circuit further includes: a not-deleted list read 
unit which, in accordance with an instruction from the 
electronic device, identifies not-deleted areas in the 
authentication area and the non-authentication area, 
and sends information indicating the not-deleted areas 
to the electronic device. 

[0035] With the above construction, the electronic 
device can identify not-deleted areas and delete the 
identified not-deleted areas before the flash memory is 
rewritten. This increases the speed of the rewriting. 
[0036] In the above semiconductor memory card, 
the authentication unit may request a user of the elec- 
tronic device to input a user key, which is information 
unique to the user, during the authentication process, 
and the control circuit further includes: a user key stor- 
age unit which stores the user key; an identification 
information storage unit which stores a piece of identifi- 
cation information identifying an electronic device that 
has been affirmatively authenticated by the authentica- 
tion unit; and a user key request prohibition unit which 
obtains a piece of identification information from a target 
electronic device after the authentication unit starts the 
authentication process, checks whether the piece of 
identification information obtained from the target elec- 
tronic device has already been stored in the identifica- 
tion information storage unit, and prohibits the 
authentication unit from requesting a user of the elec- 
tronic device to input a user key when the piece of iden- 
tification information obtained from the target electronic 
device has already been stored in the identification 
information storage unit. 

[0037] With the above construction, the user need 
not input a password or personal data each time the 
user accesses the semiconductor memory card. This 
prevents the occurrence of unlawful tapping and using 
of the personal data. 

[0038] The above object is also fulfilled by a data 
reading apparatus for reading out a digital content from 
the above semiconductor memory card, the digital con- 
tent having been stored in the non -authentication area 
of the semiconductor memory card, and information 
indicating the number of times the digital content can be 
read out being prestored in the authentication area, the 
data reading apparatus comprising: a judgement means 
for, when the digital content is to be read out from the 
non-authentication area, reading out the information 
indicating the number of times the digital content can be 
read out from the authentication area, and judging 
whether the digital content can be read out based on the 
number of times indicated in the information; and a 
reproduction means for reading out the digital content 
from the non-authentication area only when the judge- 
ment means judges that the digital content can be read 
out, and reducing the number of times the digital con- 
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tent can be read out in the information stored in the 
authentication area. 

[0039] With the above construction, it is possible to 
limit the number of times the digital content is read out 
from the semiconductor memory card. This enables the 5 
present invention to be applied to chargeable, rental 
music contents. 

[0040] The above object is also fulfilled by a data 
reading apparatus for reading out a digital content from 
the above semiconductor memory card and reproduc- w 
ing the read-out digital content as an analog signal, the 
digital content, which can be reproduced as an analog 
signal, having been stored in the non-authentication 
area of the semiconductor memory card, and informa- 
tion indicating the number of times the digital content 75 
can be digitally output by the electronic device having 
been stored in the authentication area, the data reading 
apparatus comprising: a reproduction means for read- 
ing out the digital content from the non-authentication 
area and reproducing the read-out digital content as an 20 
analog signal; a judgement means for reading out the 
information indicating the number of times the digital 
content can be digitally output by the electronic device, 
and judging whether the digital content can be digitally 
output based on the number of times indicated in the 25 
information; and a digital output means for digitally out- 
putting the digital content only when the judgement 
means judges that the digital content can be digitally 
output, and reducing the number of times the digital 
content can be digitally output in the information stored 30 
in the authentication area. 

[0041] With the above construction, it is possible to 
limit the number of times the digital content is digitally 
copied from the semiconductor memory card. This pro- 
vides a copyright protection detailed with caution and 35 
attentiveness as intended by the copyright owner. 
[0042] As described above, the present invention is 
a semiconductor memory card functioning with flexibility 
both as a record medium for storing digital contents and 
an auxiliary storage apparatus of a computer. The 40 
present invention especially secures healthy distribution 
of digital contents for electronic music distribution. This 
is practically valuable. 

BRIEF DESCRIPTION OF THE DRAWINGS 45 

[0043] These and other objects, advantages and 
features of the invention will become apparent from the 
following description thereof taken in conjunction with 
the accompanying drawings which illustrate a specific 50 
embodiment of the invention. In the drawings: 

FIG. 1 shows the appearance of a^PC which is an 
embodiment of the present invention and is related 
to an electronic music distribution, and shows the 55 
appearance of a semiconductor memory card 
which can be loaded into and removed from the PC; 
FIG. 2 shows the appearance of a portable player 



for which the semiconductor memory card is used 
as a record medium; 

FIG. 3 is a block diagram showing the hardware 
construction of the PC; 

FIG. 4 is a block diagram showing the hardware 
construction of the player; 

FIG. 5 shows the appearance and hardware con- 
struction of the semiconductor memory card; 
FIG. 6 shows various storage areas in the semicon- 
ductor memory card which can be recognized by 
the PC and the player; 

FIGs. 7A, 7B, and 7C show limitations and com- 
mand formats when the PC or the player accesses 
an area in the semiconductor memory card, where 
FIG. 7A shows rules to be followed for accessing 
each area, FIG. 7B shows rules to be followed for 
changing the size of each area, and FIG. 7C is a 
schematic representation of areas in the semicon- 
ductor memory card; 

FIG. 8 is a flowchart showing a procedure in which 
the PC (or the player) writes a music content or the 
like to the semiconductor memory card; 
FIG. 9 is a flowchart showing a procedure in which 
a music content or the like is read out from the sem- 
iconductor memory card and played by the player 
(or the PC); 

FIG. 10 is a flowchart showing the operation in 
which the player (or the PC) handles the number of 
read-outs stored in the authentication area in the 
semiconductor memory card; 
FIG. 11 is a flowchart showing the operation in 
which the player (or the PC) handles the number of 
permitted digital outputs stored in the authentica- 
tion area in the semiconductor memory card; 
FIG. 12 shows a data structure which is common to 
the authentication and non-authentication areas of 
the semiconductor memory card, and also shows a 
flowchart of the reading/writing process corre- 
sponding to the data structure; 
FIGs. 13A to 13D show a change in the relationship 
between the logical addresses and physical 
addresses, where FIG. 13A shows the relationship 
before the change, FIG. 13B shows the relationship 
after the change, FIG. 13C shows a conversion 
table corresponding to FIG. A, and FIG. 1 3D shows 
a conversion table corresponding to FIG. B; 
FIGs. 14A to 14D show functions related to not- 
deleted blocks in the semiconductor memory card, 
where FIG. 14A shows the uee state of logical and 
physical blocks and physical blocks, FIG. 14B 
shows the not-deleted block list corresponding to 
the use state of the blocks shown in FIG. 14A, FIG. 
14C is a flowchart showing the procedure of the PC 
or the player for deleting blocks beforehand using 
the not-deleted block list command and the delete 
command, and FIG. 14D is a table showing the use 
state of the logical blocks; 

FIG. 15 shows a communication sequence in an 
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authentication between the player and the semicon- 
ductor memory card and also shows main compo- 
nents used in the authentication; 
FIG. 1 6 shows a communication sequence in a var- 
iation of the authentication of the present invention 
between the memory card and an external device; 
FIG. 17 shows a communication sequence in a 
detailed procedure of the mutual authentication 
shown in FIG. 16; 

FIGs. 18A to 1 8C show the state before the bound- 
ary between the authentication and non-authenti- 
cation areas of the semiconductor memory card is 
changed, where FIG. 18A is a memory map show- 
ing the construction of the physical blocks in the 
flash memory, FIG. 18B shows a conversion table 
dedicated to the non-authentication area, and FIG. 
1BC shows a conversion table dedicated to the 
authentication area; and 

FIGs. 1 9A to 1 9C show the state after the boundary 
between the authentication and non -authentication 
areas of the semiconductor memory card is 
changed, where FIG. 19A is a memory map show- 
ing the construction of the physical blocks in the 
flash memory, FIG. 19B shows a conversion table 
dedicated to the non-authentication area, and FIG. 
19C shows a conversion table dedicated to the 
authentication area. 

DESCRIPTION OF THE PREFERRED EMBODI- 
MENTS 

[0044] An embodiment of the present invention will 
be described with reference to the drawings. 
[0045] FIG. 1 is a schematic representation of a PC 
which downloads digital contents such as music con- 
tents via a communication network, and a semiconduc- 
tor memory card (hereafter referred to as memory card) 
which can be loaded into and removed from the PC. 
[0046] A PC 1 02 includes a display 1 03, a keyboard 
104, and speakers 106, and is connected to a commu- 
nication line J 01 via a modem embedded in the PC 1 02. 
A memory card writer 107 has been inserted into a card 
slot (a memory card writer insertion slot 105) of the PC 
1 02. The memory card writer insertion slot 1 05 is based 
on PCMCIA (Personal Computer Memory Card Interna- 
tional Association) standards or the like. The memory 
card writer 1 07 is an adaptor which electrically connects 
the PC 102 and a memory card 109. The memory card 
1 09 is inserted into a memory card insertion slot 1 08 of 
the memory card writer 107. 

[0047] The user obtains music data from a contents 
provider on the Internet using the above system and the 
following procedure. 

[0048] First, the user downloads a desired music 
content into a hard disk in the PC 1 02 via the communi- 
cation line 101. However, since the music content has 
been encrypted, the user is required to execute a cer- 
tain procedure to play the obtained music content on the 



PC 102. 

[0049] To play the obtained music content, the user 
needs to pay the charge to the contents provider using 
a credit card or the like beforehand. When the user pays 

5 the charge, the user receives a password and rights 
information from the contents provider. The password is 
a key used by the user to decrypt the encrypted music 
content. The rights information shows various condi- 
tions in which the user is allowed to play the content on 

io the PC, such as the number of permitted plays, the 
number of permitted writings to the memory card, an 
expiration date indicating a period permitted for the user 
to play the content. 

[0050] After having obtained the password and the 
is rights information, the user, when intending to output 
the music from the speakers 106 of the PC 102, inputs 
the password through the keyboard 104 to the PC 102 
while a dedicated application program (hereafter 
referred to as application) having a copyright protection 
20 function is running on the PC 1 02. The application then 
checks the rights information, decrypts the encrypted 
music content using the password, plays the decrypted 
music content to output the sounds from the speakers 
106. 

25 [0051] When the rights information indicates that 
the content is permitted to be written to the memory 
card, the application can write the encrypted music 
data, password, and rights information to the memory 
card 1 09. 

30 [0052] FIG. 2 is a schematic representation of a 
portable copy/play apparatus (hereafter referred to as 
player) 201 for which the memory card 1 09 is used as a 
record medium. 

[0053] On the upper surface of the player 201 , a liq- 
35 uid crystal display unit 202 and operation buttons 203 
are formed. On the front side of the player 201 , a mem- 
ory card insertion slot 206 and a communication port 
213 are formed, where the memory card 109 is inserted 
into the memory card insertion slot 206, and the com- 
40 munication port 213 is achieved by USB (Universal 
Serial Bus) or the like and connects to the PC 102. On 
a side of the player 201 , an analog output terminal 204, 
a digital output terminal 205, and an analog input termi- 
nal 223 are formed. 
45 [0054] The player 201, after the memory card 109 
storing music data, a password, and rights information 
is loaded into the player 201, checks the rights informa- 
tion. When the music is permitted to be played, the 
player 201 reads out the music data, decrypts the read- 
so out music data, converts the decrypted music content 
into an analog signal, and outputs the sounds of the 
analog signal through headphones 208 connected to 
the analog output terminal 204. Alternatively, the player 
201 outputs digital data of the music data to the digital 
55 output terminal 205. 

[0055] The player 201 can also convert an analog 
audio signal, which is input to the player 201 through a 
microphone or the like then the analog input terminal 
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223, into digital data and stores the digital data in the 
memory card 109. The player 201 can also download 
music data, a password, and rights information from the 
PC 102 via the communication port 213 and record the 
downloaded information to the memory card 109. That 
is to say, the player 201 can replace the PC 1 02 and the 
memory card writer 107 shown in FIG. 1 in terms of 
recording the music data on to the memory card 109 
and playing the music data recorded on the memory 
card 1 09. ' 

[0056] FIG. 3 is a block diagram showing the hard- 
ware construction of PC 102. 

[0057] The PC 102 includes a CPU 110, a ROM 
1 1 1 prestoring a device key 111a and a control program 
111b, a RAM 112, the display 103, a communication 
port 1 1 3 including a modem port used for connection to 
the communication line 101 and an USB used for con- 
nection to the player 201 , the keyboard 1 04, an internal 
bus 114, the memory card writer 107 connecting the 
memory card 1 09 and the internal bus 214, a descram- 
bler 117 for descrambling the encrypted music data 
read out from the memory card 109, an AAC decoder 
1 1 8 conforming to M PEG2-AAC (IS01 381 8-7) standard 
for decoding the descrambled music data, a D/A con- 
verter 1 1 9 for converting the decoded digital music data 
into an analog audio signal, the speakers 106, and a 
hard disk 120 storing a file management software pro- 
gram and an application. 

[0058] The PC 1 02 can perform the following: 

(1) use the memory card 109 as an auxiliary stor- 
age apparatus having an independent file system 
(e.g., IS09293) as hard disks have by executing the 
file management software program stored in the 
hard disk 120, 

(2) download music contents or the like from the 
communication line 101 via the modem port of the 
communication port 1 13 by executing the dedicated 
application stored in the hard disk 120, 

(3) store the music contents or the like in the mem- 
ory card 109 after a mutual authentication, and 

(4) read out the music contents or the like from the 
memory card 1 09 and output the read-out contents 
to the speakers 1 06 for playing. 

[0059] The device key 1 1 1 a stored in the ROM 1 1 1 
is a secret key unique to the PC 102 and is, as will be 
described later, used for the mutual authentication or 
the like. 

[0060] FIG. 4 is a block diagram showing the hard- 
ware construction of the player 201 . 
[0061] The player 201 includes a CPU 210, a ROM 
21 1 prestoring a device key 21 1 a and a control program 
211b, a RAM 212, a liquid crystal display unit 203, a 
communication port 213 achieved by an USB or the like 
used for connection to the PC 102, operation buttons 
202, an internal bus 214, a card l/F unit 215 connecting 
the memory card 109 and the internal bus 214, an 



authentication circuit 21 6 for executing a mutual authen- 
tication with the memory card 109, a descrambler 217 
for descrambling the encrypted music data read out 
from the memory card 109, an AAC decoder 218 con- 

5 forming to MPEG2-AAC (IS013818-7) standard for 
decoding the descrambled music data, a D/A converter 
219 for converting the decoded digital music data into 
an analog audio signal, speakers 224, an A/D converter 
221 for converting an analog audio signal input from the 

w analog input terminal 223 into digital music data, an 
AAC encoder 220 conforming to MPEG2-AAC 
(IS013818-7) standard for encoding the digital music 
data, a scrambler 222 for scrambling the encoded music 
data, an analog output terminal 204, a digital output ter- 

75 minal 205, and an analog input terminal 223. 

[0062] The player 201 loads the control program 
211b from the ROM 211 into the RAM 212 to allow the 
CPU 210 to execute the control program 21 1b. By doing 
this, the player 201 can read out music contents from 

20 the memory card 109, play and output the read-out 
music contents to the speakers 224 and can also store 
music contents input via the analog input terminal 223 
and communication port 213 into the memory card 1 09. 
That is to say, the user can use the player 201 not only 

25 for copying and playing music personally as with ordi- 
nary players, but also for copying and playing such 
music contents (protected by copyright) as are distrib- 
uted by an electronic music distribution system and 
downloaded by the PC 1 02. 

30 [0063] FIG. 5 shows the appearance and hardware 
construction of the memory card 109. 
[0064] The memory card 109 contains a rewritable 
nonvolatile memory to which data can be written repeat- 
edly. The rewritable nonvolatile memory has capacity of 

35 64MB, and is driven by power supply voltage of 3.3V 
and a clock signal supplied from external sources. The 
memory card 109 is a 2.1mm-thick, 24mm-wide, and 
32mm-deep rectangular parallelopiped. The memory 
card 109 is provided with a write-protect switch on its 

40 side, and is electrically connected to an external appa- 
ratus via a 9-pin connection terminal formed at an end 
of the memory card 1 09. 

[0065] The memory card 109 contains three IC 
chips: a control IC 302, a flash memory 303, and a ROM 
45 304. 

[0066] The flash memory 303 is a flash -erasable, 
rewritable nonvolatile memory of a block deletion type, 
and includes logical storage areas: an authentication 
area 332 and a non-authentication area 331. The 

so authentication area 332 can be accessed only by the 
apparatuses that have been authenticated as proper 
apparatuses. The non-authentication area 331 can be 
accessed by any apparatuses whether they are authen- 
ticated or not. In the present embodiment, the authenti- 

55 cation area 332 is used for storing important data 
related to copyright protection, and the non-authentica- 
tion area 331 is used as an auxiliary storage apparatus 
in a typical computer system. Note that a certain 
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address in the flash memory 303 is used as a boundary 
between these two storage areas. 
[0067] The ROM 304 includes a storage area which 
is a read-only area and is called special area. The spe- 
cial area prestores information including: a medium ID 
341 which is an identifier of the memory card 109; and 
a maker name 342 which indicates the name of the 
manufacture of the memory card 109. Note that the 
medium ID 341 is unique to the memory card 109 and 
discriminates the memory card 1 09 from the other sem- 
iconductor memory cards and that the medium ID 341 is 
used for the mutual authentication between appara- 
tuses and used for preventing an unauthorized access 
to the authentication area 332. 

[0068] The control IC 302 is a control circuit com- 
posed of active elements (logic gates and the like), and 
includes an authentication unit 321 , a command judge- 
ment control unit 322, a master key storage unit 323, a 
special area access control unit 324, an authentication 
area access control unit 325, a non-authentication area 
access control unit 326, and an encryption/decryption 
circuit 327. 

[0069] The authentication unit 321 is a circuit that 
performs a challenge-response-type mutual authentica- 
tion with a remote apparatus attempting to access the 
memory card 109. The authentication unit 321 includes 
a random number generator and an encryption unit, and 
authenticate the remote apparatus as a proper one 
when having confirmed that the remote apparatus has 
the same encryption unit as the local apparatus. Note 
that in the challenge- response-type mutual authentica- 
tion, both two apparatuses in communication perform 
the following: the local apparatus first sends challenge 
data to the remote apparatus, the remote apparatus in 
return generates response data by processing the 
received challenge data for certifying the properness of 
the remote apparatus and sends the generated 
response data to the local apparatus, and the local 
apparatus judges whether the remote apparatus is 
proper by comparing the challenge data with the 
response data. 

[0070] The command judgement control unit 322 is 
a controller composed of a decoding circuit and a con- 
trol circuit The decoding circuit identifies a command 
(an instruction to the memory card 1 09) input via a com- 
mand pin and execute the identified command. The 
command judgement control unit 322 controls the com- 
ponents 321 to 327 in accordance with the received 
commands. 

[0071] The commands received by the command 
judgement control unit 322 includes not only commands 
to read, write, and delete data from/into the flash mem- 
ory 303, but commands to control the flash memory 303 
(commands related to an address space, not-deleted 
data, etc.). 

[0072] For example, in relation to reading/writing 
data, the Secure Read address count command and the 
SecureWrite address count command are defined as 



commands for accessing the authentication area 332, 
and the Read address count command and the Write 
address count command are defined as commands for 
accessing the non-authentication area 331. In the 

5 above commands, "address" is a serial number of the 
first sector of a sequence of sectors from/on which data 
is read or written by the command. "Count" is the total 
number of sectors from/on which data is read or written 
by the command. "Sector" is a unit representing the 

w amount of data read or written f rom/to the memory card 
109. In the present embodiment, one sector is 512 
bytes. 

[0073] The master key storage unit 323 prestores a 
master key 323a which is used by the remote apparatus 
is during the mutual authentication and is used to protect 
data in the flash memory 303. 

[0074] The special area access control unit 324 is a 
circuit for reading out information such as the medium 
ID 341 from the special area (ROM) 304. 
20 [0075] The authentication area access control unit 

325 and the n on -authentication area access control unit 

326 are circuits for reading/writing data from/to the 
authentication area 332 and the non-authentication 
area 331 , respectively. Each of the units 325 and 326 

25 sends/receives data to/from external apparatuses (the 
PC 102, the player 201, etc.) via four data pins. 
[0076] It should be noted here that the access con- 
trol units 325 and 326 each contains a buffer memory as 
large as one block (32 sectors, or 16K bytes), and logi- 

30 cally, inputs/outputs data in units of sectors to/from the 
area 332 or 331 in response to a command issued from 
an external apparatus, although it inputs/outputs data in 
units of blocks when the flash memory 303 is rewritten. 
More specifically, when a sector in the flash memory 

35 303 is to be rewritten, the access control unit 325 or 326 
reads out data from a block including the sector from the 
flash memory 303, deletes the block in the flash mem- 
ory 303 at once, rewrites the sector in the buffer mem- 
ory, then writes the block of data including the rewritten 

40 sector to the flash memory 303. 

[0077] The encryption/decryption circuit 327 is a 
circuit which performs encryption and decryption using 
the master key 323a stored in the master key storage 
unit 323 under the control of the authentication area 

45 access control unit 325 and the non-authentication area 
access control unit 326. The encryption/decryption cir- 
cuit 327 encrypts data before writing the data to the 
flash memory 303, and decrypts the data after reading 
out the data from the flash memory 303. These encryp- 

so tion and decryption are performed to prevent unlawful 
acts such as an act of disassembling the memory card 
109, analyzing the contents of the flash memory 303 
directly, and stealing the password from the authentica- 
tion area 332. 

55 [0078] It should be noted here the control IC 302 
includes a synchronization circuit, a volatile storage 
area, and a nonvolatile storage area as well as the main 
components 321 to 327. The synchronization circuit 
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generates an internal clock signal in synchronization 
with a clock signal supplied from a clock pin, and sup- 
plies the generated internal clock signal to each compo- 
nent. 

[0079] Also, to protect the information stored in the 
special area (ROM) 304 against tampering by unauthor- 
ized persons, the special area (ROM) 304 may be 
embedded in the control IC. Alternatively, the informa- 
tion may be stored in the flash memory 303. In this 
case, the special area access control unit 324 may 
impose a limitation on writing data to the information, or 
the encryption/decryption circuit 327 may encrypt the 
information before the information is stored in the flash 
memory 303. 

[0080] FIG. 6 shows various storage areas in the 
memory card 1 09 which can be recognized by the PC 
1 02 and the player 201 . The storage areas in the mem- 
ory card 1 09 are classified into three main areas: spe- 
cial area 304; authentication area 332; and non- 
authentication area 331 . 

[0081] The special area 304 is a read-only area. A 
dedicated command is used to read data from the spe- 
cial area 304. Reading/writing data from/to the authenti- 
cation area 332 is possible only when the authentication 
between the PC 102 or the player 201 and the memory 
card 109 has been affirmative. An encrypted command 
is used to access the authentication area 332. The non- 
authentication area 331 can be accessed by commands 
on public use such as the commands conforming to the 
ATA (AT Attachment) or SCSI (Small Computer System 
Interface) standard. That is to say data can be 
read/written from/to the non -authentication area 331 
without an authentication process. Accordingly, a file 
management software program being a standard equip- 
ment on the PC 102 can be used to read/write data 
from/to the non-authentication area 331 , as with a flash 
ATA or a compact flash. 

[0082] The three main areas store the kinds of infor- 
mation shown below which provide the areas with a 
function as an auxiliary storage apparatus for a typical 
PC, and a function to copyright-protect the music data 
distributed by an electronic music distribution system. 
[0083] The non -authentication area 331 stores an 
encrypted content 426, user data 427, etc. The 
encrypted content 426 is music data being an object of 
copyright protection and having been encrypted. The 
user data 427 is general data irrelevant to copyright pro- 
tection. The authentication area 332 stores an encryp- 
tion key 425 which is a secret key used for decrypting 
the encrypted content 426 stored in the non-authentica- 
tion area 331 . The special area 304 stores the medium 
ID 341 which is necessary for accessing the authentica- 
tion area 332. 

[0084] The PC 1 02 or the player 201 first reads out 
the medium ID 341 from the special area 304 in the 
memory card 109 loaded into itself, then extracts the 
encryption key 425 and the rights information from the 
authentication area 332 using the medium ID 341. 



When it is confirmed from the rights information that the 
encrypted content 426 stored in the non-authentication 
area 331 is permitted to be played, the encrypted con- 
tent 426 can be read out and played while being 
5 decrypted with the encryption key 425. 

[0085] Here, suppose that a user writes only the 
music data that has been obtained unlawfully to the 
non-authentication area 331 in the memory card 109 
using the PC 102 or the like, then attempts to play the 
10 music data from the memory card 109 loaded into the 
player 201 . In this case, although the non-authentication 
area 331 in the memory card 1 09 stores the music data, 
no encryption key 425 or rights information correspond- 
ing to the music data is stored in the authentication area 
15 332. Therefore, the player 201 fails to play the music 
data. With such a construction in which when only a 
music content is copied to the memory card 1 09 without 
authorized encryption key or rights information, the 
music content cannot be played, unauthorized copying 
20 of digital contents is prevented. 

[0086] FIGs. 7A, 7B, and 7C show limitations and 
command formats when the PC 102 or the player 201 
accesses an area in the memory card 109. FIG. 7A 
shows rules to be followed for accessing each area. 
25 FIG. 7B shows rules to be followed for changing the size 
of each area. FIG. 7C is a schematic representation of 
the areas in the memory card 109. 
[0087] The special area 304 is a read-only area and 
can be accessed by a dedicated command without an 
30 authentication process. The medium ID 341 stored in 
the special area 304 is used to generate or decrypt the 
encrypted command which is used Jo access the 
authentication area 332. More specifically, the PC 102 
or the player 201 reads out the medium ID 341, 
35 encrypts a command to be used to access the authenti- 
cation area 332, and sends the encrypted command to 
the memory card 109. On receiving the encrypted com- 
mand, the memory card 109 decrypts the encrypted 
command using the medium ID 341, interprets and exe- 
40 cutes the command. 

[0088] The authentication area 332 can be 
accessed only when an authentication between an 
apparatus attempting to access the memory card 109 
such as the PC 102 or the player 201 and the memory 
45 card 1 09 has been affirmative. The size of the authenti- 
cation area 332 is equal to the size of (YYYY+1 ) sec- 
tors. That is to say, the authentication area 332 is 
composed of sector 0 to sector YYYY (YYYY th sector) 
logically, and is composed of sectors having XXXX th 
so sector address to (XXXX+YYYY) th sector address in the 
flash memory 303, physically. Mote that sector 
addresses are serial numbers assigned uniquely to all 
the sectors constituting the flash memory 303. 
[0089] The non-authentication area 331 can be 
55 accessed by a standard command conforming to the 
ATA or SCSI standard. The size of the non-authentica- 
tion area 331 is equal to XXXX sectors. That is to say, 
the non-authentication area 331 is logically and physi- 
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cally composed of sector 0 to (XXXX-1 ) th sectors. 
[0090] It should be noted here that an alternate 
block area 501 may be allocated in the flash memory 

303 beforehand. The alternate block area 501 is a group 

of alternate blocks which are used to replace defective 5 
blocks (blocks that have a defective storage area 
from/to which data cannot be read/written normally) in 
the authentication area 332 or the non-authentication 
area 331. 

[0091] In the present embodiment, the special area io 

304 can be accessed without authentication. However, 
to prevent unlawful analysis by any persons, the special 
area 304 may be made accessible only by such appara- 
tus as having been authenticated affirmatively, or com- 
mands used for accessing the special area 304 may be is 
encrypted. 

[0092] Now, changing the size of the authentication 
area 332 and the non-authentication area 331 will be 
described with reference to FIGs. 7B and 7C. 
[0093] The total storage capacity of the authentica- 20 
tion area 332 and the non-authentication area 331 in the 
flash memory 303 is equal to the capacity of 
(XXXX+YYYY+1) sectors which is a fixed value 
obtained by subtracting the alternate block area 501 
and others from all the storage areas in the flash mem- 25 
ory 303. The sizes of the areas 332 and 331 are each 
variable and can be changed by changing the boundary 
address value XXXX. 

[0094] The first step in the procedure for changing 
the size of an area is to execute authentication. This 30 
authentication is executed to prevent any users from 
easily changing the size of the area using one of stand- 
ard equipment programs prevalent among PC users or 
a software program intended for unlawful access. After 
the authentication is complete, the size of the non- 35 
authentication area 331 (the number of new sectors, 
XXXX) is sent to the memory card 109 using a dedi- 
cated command for changing the area size. 
[0095] The memory card 109, on receiving the 
above dedicated command for changing the area size, 40 
stores the value XXXX in the nonvolatile storage area or 
the like in the memory card 109, then controls the suc- 
ceeding accesses to the authentication area 332 and 
the non-authentication area 331 using the value XXXX 
as a new boundary address. More specifically, the 45 
memory card 109 assigns physical sector 0 to XXXX* 
sector in the flash memory 303 to the non-authentica- 
tion area 331 , and XXXX th to (XXXX+YYYY) th sector to 
the authentication area 332. The access control units 
325 and 326 perform the address conversion between a so 
logical address and a physical address, and monitors 
generation of an improper access to outside an allo- 
cated storage area. It should be noted here that logical 
addresses are recognized by an external apparatus as 
addresses in a data space of the memory card 1 09, cor- 55 
responding to the values used in the commands, and 
that the physical addresses are addresses in a data 
space of the flash memory 303 contained in the mem- 
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ory card 109. 

[0096] If the authentication area 332 is increased in 
size by reducing the boundary address, an arrangement 
will be required to maintain the logical compatibility 
between before and after the address change. For this 
purpose, ail the data stored in the authentication area 
332 are moved (copied) toward smaller addresses by 
the amount of reduction in the boundary address, for 
example. With this arrangement, physical addresses 
correspond to the new logical addresses starting from 
the new boundary address. With this arrangement, the 
data space of the authentication area 332 is enlarged 
while logical addresses for the data stored in the 
authentication area 332 are maintained. 
[0097] The dedicated command for changing the 
area size may be encrypted before use to prevent 
unlawful accesses. 

[0098] FIG. 8 is a flowchart showing a procedure in 
which the PC 102 (or the player 201) writes a music 
content orthe like to the memory card 109. In the follow- 
ing description, it is supposed that the PC 102 writes 
music data to the memory card 109 (S601). 

(1) The PC 102 executes a challenge-response- 
type authentication with the authentication unit 321 
of the memory card 1 09 using the device key 1 1 1 a 
and the like, and extracts the master key 323a from 
the memory card 109 when the authentication has 
been affirmative (S602). 

(2) The PC 102 then extracts the medium ID 341 
from the special area 304 in the memory card 109 
using a dedicated command (S603). 

(3) The PC 1 02 then generates a random number, 
and generates a password, which is used for 
encrypting the music data, from the extracted mas- 
ter key 323a and the medium ID 341 (S604). In the 
above step, the random number is generated by, for 
example, encrypting the challenge data (random 
number) sent to the memory card 109 during the 
authentication process. 

(4) The generated password is encrypted using the 
master key 323a and the medium ID 341, then is 
written to the authentication area 332 as the 
encryption key 425 (S605). By this time, before the 
data (encryption key 425) is transmitted, the com- 
mand to write data to the authentication area 332 
has been encrypted and sent to the memory card 
109. 

(5) The music data is encrypted using the password 
and stored in the non-authentication area 331 as 
the encrypted content 426 (S606). 

[0099] FIG. 9 is a flowchart showing a procedure in 
which a music content or the like is read out from the 
memory card 109 and played by the player 201 (or the 
PC 102). In the following description, it is supposed that 
music data stored in the memory card 109 is played by 
the player 201 (S701). 
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(1 ) The player 201 executes a challenge-response- 
type authentication with the authentication unit 321 
of the memory card 109 using a device key 211a 
and the like, and extracts the master key 323a from 
the memory card 109 when the authentication has 5 
been affirmative (S702). 

(2) The player 201 then extracts the medium ID 341 
from the special area 304 in the memory card 109 
using a dedicated command (S703). 

(3) The player 201 then extracts the encryption key io 
425 of the music data from the authentication area 
332 in the memory card 109 (S704). By this time, 
before the data (encryption key 425) is read out, the 
command to read out data from the authentication 
area 332 has been encrypted and sent to the mem- 15 
ory card 109. 

(4) The obtained encryption key 425 is decrypted 
using the master key 323a and the medium ID 341 
to extract a password (S705). This decryption step 

is a reversed step of the encryption step S605 20 
shown in FIG. 8. 

(5) The encrypted content 426 is read out from the 
non-authentication area 331 and decrypted using 
the password extracted in the step S705, while the 
decrypted content is played as music (S706). 25 

[01 00] As described above, the music data stored in 
the non-authentication area 331 in the memory card 
1 09 cannot be decrypted without the encryption key 425 
stored in the authentication area 332. Accordingly, even 30 
if only music data is unlawfully copied to another mem- 
ory card, the copied music data cannot be normally 
played. With this construction, the copyright of the 
music data is safely protected. 

[0101] As also described above, only apparatuses 35 
that have been authenticated affirmatively are permitted 
to access the authentication area in the memory card. 
This construction provides a copyright protection in 
which only the apparatuses that satisfy certain condi- 
tions are permitted to access the authentication area in 40 
the memory card. This is achieved by selectively using 
the device key, the encryption algorithm or the like that 
are used for authentication. 

[0102] In the above example, when an encrypted 
content is written to the memory card 1 09, first the pass- 45 
word used in the encryption is encrypted using the mas- 
ter key and the medium ID, then the encrypted 
password is stored in the authentication area 332 as the 
encryption key (S605). However, either the master key 
or the medium ID may be used to encrypt the password. 50 
This construction simplifies the encryption and provides 
a merit that the circuit size of the memory card 1 09 or 
the player 102 is reduced, although there is a possibility 
that the intensity of the encryption is weakened. 
[0103] Inthe above example, the player 201 andthe 55 
PC 102 can extract the master key 323a from the mem- 
ory card 109 only when the authentication has been 
affirmative. However, the master key 323a may be 



embedded in the player 201 or the PC 1 02 beforehand. 
Alternatively, the master key 323a may be encrypted 
and stored in the special area 304 as an encrypted 
master key. 

[0104] Now, two examples of the use of the authen- 
tication area of the memory card will be described. In 
the two examples, "the number of read-outs" and "the 
number of permitted digital outputs" are stored in the 
authentication area, respectively. 
[0105] FIG. 10 is a flowchart showing the operation 
in which the player 201 (or the PC 102) handles the 
number of read-outs 812 stored in the authentication 
area in the memory card 109. In the present example, 
the player 201 can play the music data stored in the 
non-authentication area 331 in the memory card 109 as 
an audio signal as many times as indicated by the 
number of read-outs 812 stored in the memory card 109 
(S801). 

(1 ) The player 201 executes a challenge-response- 
type authentication with the authentication unit 321 
of the memory card 109 using a device key 211a 
and the like, and extracts the master key 323a from 
the memory card 109 when the authentication has 
been affirmative (S802). 

(2) The player 201 then extracts the medium ID 341 
from the special area 304 in the memory card 1 09 
using a dedicated command (S803). 

(3) The player 201 then extracts the encryption key 
425 of the music data from the authentication area 
332 in the memory card 109 (S804). By this time, 
before the data (encryption key 425) is read out, the 
command to read out data from the authentication 
area 332 has been encrypted and sent to the mem- 
ory card 1 09. 

(4) The player 201 then extracts the number of 
read-outs 812 from the authentication area 332 in 
the memory card 109, and checks the number of 
read-outs 812 (S804). When the number indicates 
allowance of limitless reading out, the player 201 
plays the music in accordance with the procedure 
(S704 to S706) shown in FIG. 9 (S806 to S808). 

(5) When the number of read-outs 812 is 0, it is 
judged that no reading out is allowed (S805), and 
the play process ends (S809). When the number of 
read-outs 812 is a value other than 0 and does not 
indicate allowance of limitless reading out, the 
player 201 reduces the number by one, writes the 
resultant number to the authentication area 332 
(S805), then plays the music in accordance with the 
procedure (S704 to S706) shown in FIG. 9 (S806 to 
S808). 

[0106] As described above, it is possible for the 
player 201 to control the number of times the player 201 
plays the music by prestoring the number of read-outs 
812 which shows the number of times the music can be 
played. This enables the present technique to be 
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applied to analog reproduction of music obtained 
through, for example, rental CDs or kiosk terminals 
(online vending machines for music distribution con- 
nected to a communication network). 
[0107] It should be noted here that "read out time" 5 
may be stored instead of the number of read-outs 812 to 
impose a limitation on the total time the music content 
can be played. Alternatively, combined information of 
the number of times and a time may be stored instead. 
As another example, the number of read-outs 812 may io 
be reduced when the content is kept to be played after 
a certain period (e.g., 10 seconds). As another exam- 
ple, the number of read-outs 812 may be encrypted 
then stored so that the information is protected from 
tampering. 15 
[0108] FIG. 11 is a flowchart showing the operation 
in which the player 201 (or the PC 1 02) handles the 
number of permitted digital outputs 913 stored in the 
authentication area in the memory card 109. In the 
present example, the player 201 can read out the music 20 
data from the non-authentication area 331 in the mem- 
ory card 109 and output the read digital music data as 
many times as indicated by the number of permitted dig- 
ital outputs 91 3 stored in the memory card 1 09 (S901 ). 

25 

(1) The player 201, as in the steps S701 to S705 
shown in FIG. 9, executes an authentication with 
the memory card 109 to extract the master key 
323a (S902), extracts the medium ID 341 (S903), 
extracts the encryption key 425 (S904), and 30 
extracts a password (S9G5). 

(2) The player 201 then extracts the number of per- 
mitted digital outputs 913 from the authentication 
area 332 in the memory card 1 09, and checks the 
number of permitted digital outputs 913 (S906). 35 
When the number indicates allowance of limitless 
digital output, the player 201 reads out the 
encrypted content 426 from the non-authentication 
area 331, and decrypts the encrypted content 426 

to digital data using the password extracted in the 40 
step S905 and outputs the decrypted digital data 
from the digital output terminal 205 as digital music 
data (S909). 

(3) When the number of permitted digital outputs 

91 3 is 0, it is judged that no digital output is allowed 45 
(S908), and the data is played only by analog out- 
put (S908). More specifically, the encrypted content 
426 is read out from the non-authentication area 
331, and music is played while the content is 
decrypted using the password (S908). 50 

(4) When the number of permitted digital outputs 
913 is a value other than 0 and does not indicate 
allowance of limitless digital output, the player 201 
reduces the number by one, writes the resultant 
number to the authentication area 332 (S907), then 55 
reads out the encrypted content 426 from the non- 
authentication area 331, decrypts the encrypted 
content 426 to digital data using the password 



extracted in the step S905 and outputs the 
decrypted digital data from the digital output termi- 
nal 205 (S909). 

[0109] As described above, the number of digital 
outputs from the player 201 can be controlled by storing 
the number of permitted digital outputs 913 in the 
authentication area 332 in the memory card 109. This 
enables the present technique to be applied to digital 
reproduction of music obtained through, for example, 
rental CDs or kiosk terminals, which is to say, digital 
dubbing of music data stored in a memory card can be 
permitted a certain times in the authority of the copy- 
right owner. 

[0110] It should be noted here that as with "the 
number of read-outs", "permitted digital output time" 
may be stored instead of the number of permitted digital 
outputs 913 to impose a limitation on the total time dig- 
ital data of the music content can be output. Alterna- 
tively, combined information of the number of permitted 
digital outputs and a time may be stored instead. As 
another example, the number of permitted digital out- 
puts 91 3 may be reduced when the content is kept to be 
output after a certain period (e.g., 10 seconds). As 
another example, the number of permitted digital out- 
puts 91 3 may be encrypted then stored so that the infor- 
mation is protected from tampering. 
[01 1 1 ] A function may be added so that the number 
of permitted digital outputs can be increased by a 
number which is specified by the copyright owner in cor- 
respondence to a charge the copyright owner receives. 
[01 1 2] Now, the physical data structure (structure of 
the sector and the ECC block) of the memory card 109 
will be described. 

[0113] The memory card 109 adopts such a data 
structure as is suitable for preventing unlawful acts 
related to the back up or restoration of the data stored in 
the flash memory 303 and for preventing unlawful acts 
related to the data tampering. Such a data structure is 
adopted due to the necessity for dealing with the unlaw- 
ful operations that may be performed on the above 
methods in which "the number of read-outs" or "the 
number of permitted digital outputs" is stored in the 
authentication area 332 and the value is reduced each 
time the process is performed. 

[0114] More specifically, the music may be repeat- 
edly played after the whole data recorded in the flash 
memory 303 is backed up to an external auxiliary stor- 
age apparatus of the like. By doing this, when the 
number of permitted play operations becomes 0, the 
music can be repeatedly played again by restoring the 
back up data. Also, the music may unlawfully be played 
repeatedly by tampering the number of read-outs. As a 
result, it is necessary to make some arrangement to 
prevent such unlawful acts. 

[0115] FIG. 12 shows a data structure which is 
common to the authentication and n on -authentication 
areas 332 and 331 of the memory card 109, and also 
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shows a flowchart of the reading/writing process corre- 
sponding to the data structure. 

[0116] In the present example, the counter value 
generated by the random number generator 103 of the 
authentication unit 321 in the control IC 302 is used as 5 
a time-variant key. 

[0117] A 16-byte extension area 1005 is assigned 
to each of 512-byte sectors 1004 in the flash memory 
303. Each sector stores data which has been encrypted 
using the counter value. The extension area 1005 is w 
composed of ECC data 1006 and a time-variant area 
1007. The ECC (Error-Correcting Code) data 1006 is 8- 
byte data being an ECC for the encrypted data stored in 
the current sector. The time-variant area 1007 is 8-byte 
and stores a counter value used for generating the is 
encrypted data stored in the current sector. 
[0118] It should be noted here that only the sectors 

1004 can be accessed logically (i.e., using a public 
command or the like), and that only the extension area 

1005 can be accessed physically (i.e., controlled by an 20 
apparatus that reads/writes data from/to the memory 
card). 

[0119] With the above construction, unlawful data 
tampering can be prevented by comparing the sector 
data with the contents of the time-variant area 1007, 25 
where even if the sector data is tampered using a com- 
mand or the like, the contents of the time-variant area 
1 007 do not change. 

[0120] More specifically, the PC 102 or the player 
201 writes/reads data to/from the authentication area 30 
332 or the non-authentication area 331 in the flash 
memory 109 following the procedure shown below in 
units of sectors 1004. First, the procedure in which the 
PC 1 02 writes data to the memory card 1 09 (S1 001 ) will 
be described. 35 

(1) The PC 102 requests the memory card 109 to 
issue a counter value. In response to this request, 
the control IC 302 in the memory card 109 gener- 
ates a random number using a random number ao 
generator 1003 contained in the control IC 302 
(S1005), and sends the generated random number 

to the PC 102 as the counter value "(Si 002). 

(2) A password is generated from the received 
counter value and the master key 323a and the 45 
media ID 341 which have already been obtained 

(51003) . 

(3) One sector of data to be written is encrypted 
using a password and sent to the memory card 1 09 

(51 004) . Together with the encrypted data, (i) infor- so 
mation specifying the location of a sector to which 

the encrypted data is to be written, and (ii) the 
counter value used for the encryption are sent to 
the memory card 1 09. 

(4) The memory card 1 09 writes the encrypted data 55 
to the specified sector 1004 (S1006). 

(5) An ECC is obtained by calculation from the 
encrypted data, and the obtained ECC is written to 



the extension area 1005 as the ECC data 1006 
(S1007). 

(6) The counter value received together with the 
encrypted data is written to the time-variant area 
1007 (S1008). 

[0121] Next, the procedure in which the PC 102 
reads out data from the memory card 109 (S1011) will 
be described. 

(1) The PC 102 requests the memory card 109 to 
read out data by specifying the location of a sector 
from which the data is to be read out. On receiving 
the request, the memory card 1 09 first reads out 
encrypted data from the specified sector 1004 and 
outputs the read-out data to the PC 102 (S1016). 
The PC 102 receives the encrypted data (S1012). 

(2) The memory card 1 09 then reads out a counter 
value from the time-variant area 1007 in the exten- 
sion area 1 005 corresponding to the specified sec- 
tor 1004, and sends the read-out counter value to 
the PC 102 (S1017). The PC 102 receives the 
counter value (S1013). 

(3) A password is generated from the read-out 
counter value and the master key 323a and the 
media ID 341 which have already been obtained 
(S1014). 

(4) The encrypted data is decrypted using the pass- 
word (S1005). 

[0122] Here, if the data in the sector 1004 has been 
changed by tampering or the like, the decryption fails 
due to mismatch between the counter value read out 
from the time-variant area 1 007. 

[0123] As described above, the flash memory 303 
contains the time-variant area 1007, a hidden area 
which cannot be seen (accessed) by users. Data is 
encrypted and stored using a password which is gener- 
ated using a counter value stored in the time-variant 
area 1007. With this construction, the data is protected 
from unlawful tampering by users. 
[0124] In the above example, the time-variant area 
1 007 is provided in the extension area 1 005 for storing 
the ECC. However, it is possible to provide the time-var- 
iant area 1007 within another area in the flash memory 
303 in condition that data stored in the area cannot be 
changed from outside the memory card. 
[0125] In the above example, a random number is 
used as the counter value. However, the counter value 
may be a timer value indicating a time that changes 
every instant, or may be the number of times data has 
been written to the flash memory 303. 
[0126] Now, a desirable example of a relationship 
between the logical addresses and physical addresses 
in the flash memory 303 will be described. 
[0127] FIGs. 13A to 13D show a change in the rela- 
tionship between the logical addresses and physical 
addresses. FIG. 13A shows the relationship before the 
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change. FIG. 13B shows the relationship after the 
change. FIG. 13C shows a conversion table 1 101 corre- 
sponding to FIG. A. FIG. 13D shows the conversion 
table 1 101 corresponding to FIG. B. 
[0128] Theconversion table 1101 is a table in which 5 
all the logical addresses (in FIGs. 13A to 13D, serial 
numbers of the logical blocks) are stored with corre- 
sponding physical addresses (in FIGs. 13A to 13D, 
serial numbers of the physical blocks constituting the 
flash memory 303). The conversion table 1 1 01 is stored w 
in a nonvolatile area in the control IC 302 or the like and 
is referred to by the authentication area access control 
unit 325 or the non-authentication area access control 
unit 326 when, for example, a logical address is con- 
verted into a physical address. 15 
[0129] Devices accessing the memory card 109 
cannot write data to all the data storage spaces that 
physically exist in the memory card 109 (i.e., all the 
physical blocks constituting the flash memory 303), but 
can write data only to logical data spaces (logical 20 
blocks) that are specified by the logical addresses. 
[0130] The above arrangement is made, for one 
reason, to secure an alternative area which would 
replace an area from/to which data cannot be read/writ- 
ten due to a partial defect of the flash memory 303. 25 
Even if such a defect block has been replaced by an 
alternative block, changing the conversion table so as to 
reflect the change in the correspondence between the 
logical and physical block numbers enables the flash 
memory 303 to pretend against external devices that no 30 
defects have been caused. This is because in each file, 
the logical continuity, which corresponds to a plurality of 
continuous physical blocks, is maintained. 
[0131] However, the fragmentation of logical blocks 
increases when, for example, a file composed of a plu- 35 
rality of blocks is repeatedly stored or deleted in/from 
the memory card 109. A specific example of this is 
shown in FIG. 13A in which the logical addresses (0 and 
2) of the logical blocks constituting "file 1 " are discontin- 
uous. 40 
[0132] When such discontinuity of logical blocks 
occurs, for example, music data cannot be written to 
continuous logical areas in the memory card 109. This 
necessitates issuance of the write command "Write 
address count" for each block, resulting in reduction in as 
the writing speed. Similarly, this necessitates issuance 
of the read command "Read address count" for each 
block even when music data of one tune is to be read 
out, making the real-time reproduction of the music data 
difficult. 50 
[0133] To solve the above problem, the control IC 
302 of the memory card 109 has a function to rewrite 
the conversion table 1 1 01 based on a command issued 
from an external device. More specifically, when a dedi- 
cated command for rewriting the conversion table 1101 55 
is input from a command pin, the control IC 302 of the 
memory card 109 interprets the dedicated command 
and rewrites the conversion table 1 1 01 using a parame- 



ter that is sent after the dedicated command. 
[0134] The above operation will be detailed using 
an example shown in FIGs. 13A to 13D. Suppose that 
before the above dedicated command is received, the 
flash memory 303 contains data constituting the file 
"filel" at locations indicated by physical addresses 0 
and 2, and data constituting the file "file2" at a location 
indicated by physical address 1, as shown in FIG. 13A, 
and that the conversion table 1 101 shows that the logi- 
cal addresses match the physical addresses. That is to 
say, in the logical addresses, as well as in the physical 
addresses, the data of "file2" is sandwiched by the data 
of "filer. 

[0135] With an intention of solving the above state, 
an external device sends the above dedicated com- 
mand and a parameter to the flash memory 303, the 
dedicated command instructing to secure the continuity 
of "filer. The command judgement control unit 322 of 
the memory card 109, in accordance with the received 
dedicated command and parameter, rewrites the con- 
version table 1101 as shown in FIG. 13D. FIG. 13B 
shows the relationship between the logical and physical 
addresses in the flash memory 303 after the above 
sequence of operations. 

[0136] As understood from FIG. 13B, though the 
arrangement of the physical blocks has not been 
changed, the logical blocks constituting "filer have 
been relocated to be successive. With this arrange- 
ment, the external device can access "filel" at a higher 
speed than before in the next access and after. 
[0137] The conversion table 1101 can be rewritten 
as above not only to solve the fragmentation of logical 
blocks, but also to change the size of each of the 
authentication area 332 and non-authentication area 
331 in the flash memory 303. In the latter case, a high- 
speed area relocation is possible since the conversion 
table 1101 is rewritten so that a physical block to 
become small is located as a physical block to become 
large. 

[0138] Now, a function of the memory card 109 
related to not-deleted blocks will be described. More 
specifically, operations of the memory card 1 09 when 
receiving a not-deleted block list command and an 
delete command will be described. Here, the not- 
deleted blocks are physical blocks in the flash memory 
303 which contain data that has not physically been 
deleted. That is to say, data in the not-deleted blocks 
needs to be deleted at once before the blocks are used 
next (before another data is written to the not-deleted 
blocks). 

[01 39] The not-deleted block list command is one of 
the commands the command judgement control unit 
322 can interpret and execute, and is used to obtain a 
list of all the not-deleted blocks in the flash memory 303. 
[01 40] The existent data stored in the flash memory 
303 of the memory card 109 must be deleted in units of 
blocks before data is newly written to the flash memory 
303. The time for the deletion is approximately a half of 
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the total time of writing. As a result, the total time of writ- 
ing is reduced if the deletion has been completed 
beforehand. Accordingly, to achieve this, the memory 
card 1 09 provides the external device the not-deleted 
block list command and the delete command. 5 
[0141] Suppose that the current use state of the 
logical blocks and physical blocks of the flash memory 
303 is shown in FIG. 14A. As shown in FIG. 14A, logical 
blocks 0 to 2 are currently used, and physical blocks 0 to 
2, 4, and 5 are not-deleted blocks. w 
[0142] A not-deleted block list 1203 is stored in the 
command judgement control unit 322 in the above state. 
The contents of the not-deleted block list 1203 corre- 
sponding to the use state of the blocks shown in FIG. 
1 4A are shown in FIG. 1 4B. Here, the not-deleted block is 
list 1203 is a storage table composed of entries corre- 
sponding to all the physical blocks constituting the flash 
memory 303 and having values which indicate the data 
deletion states (blocks whose data has been deleted 
are incidated by '0", and blocks whose data has not 20 
been deleted are incidated by "1") of the corresponding 
physical blocks under the control of the command 
judgement control unit 322. 

[0143] FIG. 14C is a flowchart showing the proce- 
dure of the PC 1 02 or the player 201 for deleting blocks 25 
beforehand using the not-deleted block list command 
and the delete command in the above-stated states. It is 
presumed here that the flash memory 303 contains a 
table such as FAT (File Allocation Table) which shows 
the use state of the logical blocks, as shown in FIG 30 
14D. 

[0144] An external device such as the PC 102 or 
the player 201 issues the not-deleted block list com- 
mand to the memory card 109 during an idle time in 
which the memory card 109 is not accessed (S1201). 35 
On receiving the command, the command judgement 
control unit 322 of the memory card 109 refers to the 
not-deleted block list 1203 contained in the command 
judgement control unit 322, detects that physical blocks 
0 to 2, 4, and 5 are assigned a state value "1", and 40 
sends the physical block numbers to the external 
device. 

[0145] The external device then refers to the table 
that shows the use state of logical blocks in the flash 
memory 303 shown in FIG. 14D to identify the blocks 45 
that are not used logically (S1 202). 
[0146] The external device identifies, based on the 
information obtained in the steps S1201 and S1202, 
"deletable' 1 blocks that are not used logically and have 
not been deleted physically (physical blocks 4 and 5 in 50 
the present example) (S1203). The external device then 
issues the delete command specifying the physical 
block numbers 4 and 5 to the memory card 109 
(S1204). On receiving the command, the command 
judgement control unit 322 of the memory card 109 55 
deletes the physical blocks 4 and 5 by sending instruc- 
tions to the authentication area access control unit 325 
and the non-authentication area access control unit 
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326. 

[0147] After the above operation is complete, data 
is written to the physical blocks 4 and 5 at a high speed 
since the deletion process is not required for the writing. 
[0148] Now, a function of the memory card 109 
related to personal data protection will be described. 
More specifically, the personal data protection function 
is used when the memory card 109 checks an external 
device for authentication and requires personal data of 
the user of the external device. Here, each piece of the 
personal data is unique to a user and is used to identify 
the user. The user with proper personal data is recog- 
nized by the memory card 109 as an authorized user 
permitted to access the authentication area 332 in the 
memory card 1 09. 

[0149] Here, if the user is requested to input the 
personal data each time the user accesses the authen- 
tication area 332, or if the input personal data is stored 
in the authentication area 332 for each of such 
accesses, a problem might occur that the personal data 
is tapped by someone or read unlawfully by another 
user who has an authority to access the authentication 
area 332. 

[0150] One possible solution to this problem would 
be encrypting the personal data using a password pro- 
vided by the user personally and storing the encrypted 
personal data, in the same way as music data. 
[0151] However, in the above case, the user needs 
to input the password each time the personal data is 
checked. The procedure is troublesome and the man- 
agement of the password is also required. Accordingly, 
the memory card 109 provides a function to sidestep 
the problem of unnecessarily and repeatedly inputting 
the personal data. 

[0152] FIG. 15 shows a communication sequence 
in an authentication between the player 201 and the 
memory card 109 and also shows main components 
used in the authentication. Note that the processes 
shown in FIG. 15 are mainly achieved by the authentica- 
tion circuit 21 6 of the player 201 and the authentication 
unit 321 of the memory card 1 09. 

[0153] As shown in FIG. 15, the authentication cir- 
cuit 216 of the player 201 has the encryption and 
decryption functions, and also prestores a master key 

1301 which is a secret key being equal to the master 
key 323a held by the memory card 1 09, and a device ID 

1302 which is an ID unique to the player 201, such as a 
product serial number (s/n). 

[0154] The authentication unit 321 of the memory 
card 109 has the encryption, decryption, and compari- 
son functions, and also has two nonvolatile storage 
areas: a device ID group storage area 1310 and a user 
key storage area 1311. The device ID group storage 
area 1310 stores device IDs of all the devices permitted 
to access the authentication area 332 in the memory 
card 1 09. The user key storage area 1 31 1 stores a user 
key sent from a device as personal data. 
[0155] The authentication procedure will be 
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described in detail below. Note that in the transmissions 
and receptions, all the data is encrypted before trans- 
mission, and the encrypted data is decrypted in the 
reception side. A key to be used in the encryption and 
decryption is generated during the following procedure. 

(1) After the memory card 109 is connected to the 
player 201 , first, the player 201 encrypts the device 
ID 1302 using the master key 1301, and sends the 
encrypted device ID 1302 to the memory card 109. 

(2) The memory card 109 decrypts the received 
encrypted device ID 1302 using the master key 
323a, and checks whether the obtained device ID 
1302 has already been stored in the device ID 
group storage area 1310. 

(3) When it is judged that the device ID 1302 has 
already been stored, the memory card 1 09 notifies 
the player 201 that the authentication has been 
affirmative. When it is judged that the device ID 
1302 is not stored, the memory card 109 requests 
the player 201 to send a user key. 

(4) The player 201 urges the user to input the user 
key, obtains the user key as personal data of the 
user, and sends the obtained user key to the mem- 
ory card 109. 

(5) The memory card 109 compares the received 
user key with the user key having been prestored in 
the user key storage area 1311. When having 
judged that the two user keys match, or when the 
user key storage area 131 1 is vacant, the memory 
card 1 09 notifies the player 201 that the authentica- 
tion has been affirmative, and stores the device ID 
1302 obtained in the above step (3) tin the device 
ID group storage area 1310. 

[0156] With the above arrangement, when a device 
of the user is connected to the memory card 109 for the 
first time, the user is required to input personal data (a 
user key). However, in the second connection and after, 
the user is no more requested to input the personal data 
since automatical!, the authentication completes affirm- 
atively using the device ID. 

[0157] Now, a variation of the authentication proto- 
col between the memory card 109 and an external 
device such as the PC 102 or the player 201 will be 
described with reference to FIGs. 16 and 17. 
[0158] FIG. 16 shows a communication sequence 
in a variation of the authentication between the memory 
card 1 09 and an external device (in the present exam- 
ple, the player 201). 

[0159] Note that the processes shown in FIG. 16 
are mainly achieved by the authentication circuit 216 of 
the player 201 , a control program 1 1 1 b of the PC 102, 
and the authentication unit 321 of the memory card 109. 
It is presumed here that the master key storage unit 323 
of the memory card 1 09 stores an encrypted master key 
(encrypted master key 323), and that the special area 
304 stores a secure medium ID 343 as well as the 



medium ID 341 , the secure medium ID 343 being gen- 
erated by encrypting the medium ID 341 . 
[0160] First, the player 201 issues a command to 
the memory card 109 to obtain the master key 323b 

5 from the memory card 109, and decrypts the obtained 
master key 323b using the device key 211a. The 
decryption algorithm used in this decryption corre- 
sponds to the encryption algorithm used in the encryp- 
tion of the master key 323b which has now been read 

10 out from the memory card 109. Therefore, when the 
device key 211 a the player 201 has is an authorized 
one, the decryption is expected to restore the original 
master key. 

[0161] The player 201 then issues a command to 

15 the memory card 109 to obtain the medium ID 341 from 
the memory card 109, and encrypts the obtained 
medium ID 341 using the restored master key. The 
encryption algorithm used in this encryption is the same 
as the encryption algorithm used in the encryption of 

20 the secure medium ID 343 which is stored in the mem- 
ory card 109. Therefore, the encryption provides a 
secure medium ID which is the same as the secure 
medium ID 343 contained in the memory card 1 09. 
[0162] The player 201 and the memory card 109 

25 performs a mutual authentication using the secure 
medium IDs they respectively have. Through this mutual 
authentication, each of the devices generates (OK/NG) 
information and a secure key, the (OK/NG) information 
indicating whether the remote device has been authen- 

30 ticated, and the secure key being a time-variant key that 
depends on the authentication result. The secure keys 
owned by both devices match only when both devices 
201 and 109 affirmatively authenticate the other 
devices, and the secure keys change each time a 

35 mutual authentication is performed. 

[0163] After a mutual authentication has completed 
affirmatively, the player 201 generates a command 
which is used to access the authentication area 332 in 
the memory card 109. More specifically, for example, 

40 when data is read out from the authentication area 332, 
a parameter (a 24-bit address "address" and an 8-bit 
count "count") of the command "Secure Read address 
count" is encrypted using the secure key, and an 
encrypted command, which is generated by combining 

45 the encrypted parameter and a tag (a 6-bit code indicat- 
ing a command type "SecureRead") of the command, is 
sent to the memory card 109. 

[0164] On receiving the encrypted command, the 
memory card 1 09 judges the type of the command. In 
so the present example, the command is judged to be 
"SecureRead" to read data from the authentication area 
332. 

[0165] When the command is judged to be a com- 
mand to access the authentication area 332, the param- 
55 eter contained in the command is decrypted using the 
secure key obtained through the mutual authentication. 
The decryption algorithm used in this decryption corre- 
sponds to the encryption algorithm used in the encryp- 
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tion of the command by the player 201 . Therefore, when 
the mutual authentication completes affirmatively, that is 
to say, when the secure keys used by both devices 
match, the parameter obtained by the decryption should 
be equal to the original parameter used by the player 
201. 

[0166] The memory card 109 then reads out the 
encryption key 425 from a sector in the authentication 
area 332 indicated by the decrypted parameter, 
encrypts the read-out encryption key 425 using the 
secure key, and sends the encrypted encryption key to 
the player 201. 

[0167] The player 201 decrypts the received data 
using the secure key obtained through the mutual 
authentication. The decryption algorithm used in this 
decryption corresponds to the encryption algorithm 
used in the encryption of the encryption key 425 by the 
memory card 109. Therefore, when the mutual authen- 
tication completes affirmatively, that is to say, when the 
secure keys used by both devices match, the data 
obtained by the decryption should be equal to the origi- 
nal encryption key 425. 

[0168] The memory card 109, each time a com- 
mand to access the authentication area 332 is exe- 
cuted, discards (deletes) a secure key used in the 
command execution. With this arrangement, an external 
device attempting to access the authentication area 332 
in the memory card 109 needs to perform a mutual 
authentication each time the external device issues a 
command and to be affirmative in the authentication 
beforehand. 

[0169] FIG. 17 shows a communication sequence 
in a detailed procedure of the mutual authentication 
shown in FIG. 16. In the present example, the memory 
card 109 and the player 201 perform a challenge- 
response-type mutual authentication. 
[0170] The memory card 109 generates a random 
number and sends the random number to the player 
201 as challenge data to check the properness of the 
player 201 . The player 201 encrypts the challenge data 
and returns the encrypted challenge data to the mem- 
ory card 1 09 as response data to certify the properness 
of the player 201. The memory card 109 encrypts the 
random number sent as challenge data, and compares 
the received response data with the encrypted chal- 
lenge data. When the received response data and the 
encrypted challenge data match, the memory card 109 
judges that the authentication . of the player 201 has 
been affirmative (OK), and receives a command to 
access the authentication area 332 from the player 201 . 
When the received response data and the encrypted 
challenge data do not match, the memory card 109 
judges that the authentication of the player 201 Jias not 
been affirmative (NG), and if the player 201 sends a 
command to access the authentication area 332 after 
the judgement, the memory card 109 rejects the com- 
mand. 

[0171] The player 201 performs a similar authenti- 
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cation procedure to check the properness of the mem- 
ory card 1 09. That is to say, the player 201 generates a 
random number and sends the random number to the 
memory card 109 as challenge data to check the prop- 
5 erness of the memory card 109. The memory card 109 
encrypts the challenge data and returns the encrypted 
challenge data to the player 201 as response data to 
certify the properness of the memory card 109. The 
player 201 encrypts the random number sent as chal- 
io lenge data, and compares the received response data 
with the encrypted challenge data. When the received 
response data and the encrypted challenge data match, 
the player 201 judges that the authentication of the 
memory card 109 has been affirmative (OK), and 
is accesses the authentication area 332 in the memory 
card 109. When the received response data and the 
encrypted challenge data do not match, the player 201 
judges that the authentication of the memory card 109 
has not been affirmative (NG), and gives up accessing 
20 the authentication area 332. 

[0172] All the encryption algorithms used in the 
mutual authentication should be the same as far as the 
memory card 109 and the player 201 are authorized 
ones. The memory card 109 and the player 201 obtain 
25 a secure key by performing an exclusive-or operation 
using the encrypted challenge data and the response 
data obtained through the authentication and certifica- 
tion of the properness. The obtained secure key, or the 
result of the above exclusive-or operation, is used for 
30 accessing the authentication area 332 in the memory 
card 1 09. With this arrangement, it is possible for both 
devices 1 09 and 201 to share a time-variant secure key 
that is common to them only when they have been 
affirmative in the authentication. This renders the affirm- 
35 ative authentication a necessary condition for accessing 
the authentication area 332. 

[0173] The secure key may be a result of an exclu- 
sive-or operation using the encrypted challenge data, 
the response data, and the secure medium ID. 

40 [0174] Now, a variation of a function to change the 
boundary between the authentication area 332 and 
non-authentication area 331 in the memory card 109 
will be described with reference to FIGs. 18 and 19. 
[0175] FIGs. 18A to 18C show the use state of the 

45 flash memory 303 before the boundary is changed. FIG. 
1 8A is a memory map showing the construction of the 
physical blocks in the flash memory 303. 
[0176] FIG. 18B shows a conversion table 1103 
which is dedicated to the non-authentication area 331 

so and is stored in a nonvolatile storage area in the non- 
authentication area access control unit 326. The con- 
version table 1 1 03 shows relationships between the log- 
ical blocks and physical blocks in the non-authentication 
area 331 . The non-authentication area access control 

55 unit 326 refers to the conversion table 1 1 03 to convert a 
logical address into a physical address or to detect an 
improper access accessing outside an allocated stor- 
age area. 
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[0177] FIG. 18C shows a conversion table 1102 
which is dedicated to the authentication area 332 and is 
stored in a nonvolatile storage area in the authentication 
area access control unit 325. The conversion table 1 1 02 
shows relationships between the logical blocks and 5 
physical blocks in the authentication area 332. The 
authentication area access control unit 325 refers to the 
conversion table 1 1 02 to convert a logical address into 
a physical address or to detect an improper access 
accessing outside an allocated storage area. 10 
[0178] As shown in FIG. 18A, before the boundary 
is changed, out of the flash memory 303 composed of 
physical blocks 0000 to FFFF, physical blocks FOOO to 
FFFF are allocated to the alternate block area 501, 
physical blocks 0000 to DFFF whose addresses are is 
lower than the boundary are allocated to the non- 
authentication area 331, and physical blocks E0O0 to 
EFFF whose addresses are higher than the boundary 
are allocated to the authentication area 332. 
[0179] As understood from the conversion table 20 
1103 shown in FIG. 18B, the logical block numbers 
match the physical block numbers in the non-authenti- 
cation area 331 . On the other hand, as understood from 
the conversion table 1102 shown in FIG. 18C, there is 
an inverse relationship between the logical block num- 25 
bers and the physical block numbers in the authentica- 
tion area 332. That is to say, logical blocks 0000 to OFFF 
correspond to physical blocks EFFF to EOOO, respec- 
tively. This arrangement has been made by considering 
that the logical blocks are used in ascending order, and 30 
that when the boundary is moved, data in the physical 
blocks to be moved needs to be saved or moved. 
[0180] FIGs. 1 9A to 1 9C show the use state of the 
flash memory 303 after the boundary is changed. FIGs. 
19A to 19C correspond to FIGs. 18A to 18C, respec- 35 
tively. Note that the boundary change is achieved by the 
following procedure: 

(1) A dedicated command specifying an address of 
the boundary is input to the command judgement 40 
control unit 322 via a command pin; and 

(2) The command judgement control unit 322 
rewrites the conversion table 1 102 in the authenti- 
cation area access control unit 325 and the conver- 
sion table 1 1 03 in the non-authentication area 331 . 45 

[0181] As shown in FIGs. 19Ato 19C, the boundary 
is moved from between the physical blocks EOOO and 
DFFF to between the physical blocks D000 and CFFR 
That means the size of the non-authentication area 331 50 
is reduced by 1000(hex) blocks, and the size of the 
authentication area 332 is increased by 1000(hex) 
blocks. 

[0182] As shown in FIG. 19B, along with the above 
boundary change, the size of the conversion table 1 1 03 55 
of the non-authentication area 331 is reduced by 
1 0OO(hex) entries, and the size of the authentication 
area 332 is increased by 1000(hex) entries, so that the 



conversion table 1103 shows logical blocks 0000 to 
CFFF with corresponding physical blocks 0000 to CFFF. 
In contrast, as shown in FIG. 19C, the size of the con- 
version table 1102 of the authentication area 332 is 
increased by 1000(hex) entries, and the size of the 
authentication area 332 is increased by lOOO(hex) 
entries, so that the conversion table 1 102 shows logical 
blocks 0000 to 1 FFF with corresponding physical blocks 
EFFF to DOOO. 

[0183] As described above, a boundary is set 
between the authentication area and the non-authenti- 
cation area in the flash memory 303, and the size of 
both areas is changed by moving the boundary. This 
enables the memory card 109 to be used for various 
purposes. For example, the memory card 1 09 may be 
mainly used for storing digital contents which need to be 
protected by copyright, or the memory card 1 09 may be 
mainly used for other than storing such digital contents. 
[0184] In both the authentication area and the non- 
authentication area, the amount of processing in mov- 
ing and saving data along with the boundary change 
can be reduced by corresponding the logical blocks to 
the physical blocks so that physical blocks are used in 
the order of remoteness starting at the most remote 
one. 

[01 85] The above correspondence between the log- 
ical and physical blocks is easily achieved when the 
conversion table 1102 dedicated to the authentication 
area 332 and the conversion table 1103 dedicated to 
the non-authentication area 331 are separately pro- 
vided. 

[0186] In the above example, in the authentication 
area 332, there is an inverse relationship between the 
logical addresses and the physical addresses in units of 
blocks. However, other units may be used. For example, 
there may be an inverse relationship between the logi- 
cal addresses and the physical addresses in units of 
sectors or bytes. 

[0187] Up to this point, the memory card of the 
present invention has been described in its embodiment 
and variations. However, the present invention is not 
limited to the embodiment and variations. 
[0188] In the above embodiment, the PC 1 02 or the 
player 201 is required to perform a mutual authentica- 
tion with the memory card 109 using the same proce- 
dure each time it issues a command to access the 
authentication area 332 in the memory card 109. How- 
ever, a simplified authentication procedure may be used 
to access the authentication area 332, depending on 
the command type. 

[0189] For example, when the write command 
"SecureWrite" is issued, the encrypted master key 323b 
and the medium ID 341 may not be'obtained from the 
memory card 109, but the memory card 109 may exe- 
cute the write command "Secu rewrite" even when only 
a one-way authentication (an authentication of a device 
by the memory card 1 09) completes affirmatively. With 
this arrangement, commands which are little related to 
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the copyright protection will be executed at high speed. 
[0190] The flash memory 303 in the memory card 
109 of the present invention may be replaced with 
another storage medium (e.g., a nonvolatile medium 
such as a hard disk, an optical disc, and a magnet opti- 5 
cal disc). A portable storage card capable of securing a 
copyright on the stored data as the present invention 
can be achieved using any of such mediums. 
[0191] The present invention has been fully 
described by way of examples with reference to the 10 4. 
accompanying drawings, It is to be noted that various 
changes and modifications will be apparent to those 
skilled in the art. Therefore, unless such changes and 
modifications depart from the scope of the present 
invention, they should be construed as being included 75 
therein. 

Claims 

1. A semiconductor memory card that can be 20 
used/removed in/from an electronic device, com- 
prising: 

a rewritable nonvolatile memory; and 
a control circuit which controls accesses by the 25 
electronic device to an authentication area and 
a non-authentication area in the rewritable non- 
volatile memory, wherein 

the control circuit includes: 5. 
a non-authentication area access control unit 30 
which controls accesses by the electronic 
device to the non-authentication area; 
an authentication unit which performs an 
authentication process to check whether the 
electronic device is proper, and affirmatively 35 
authenticates the electronic device when the 
electronic device is proper; and 
an authentication area access control unit 
which permits the electronic device to access 
the authentication area only when the authenti- 40 
cation unit affirmatively authenticates the elec- 
tronic device. 

2. The semiconductor memory card of Claim 1, 
wherein 45 6. 

the authentication unit generates a key reflect- 
ing a result of the authentication process, and 
the authentication area access control unit 
decrypts an encrypted instruction using the key so 
generated by the authentication unit, and con- 
trols accesses by the electronic device to the 7. 
authentication area in accordance with the 
decrypted instruction, the encrypted instruction 
being sent from the electronic device. 55 

3. The semiconductor memory card of Claim 2, 
wherein 



the authentication unit performs a challenge- 
response type mutual authentication with the 
electronic device, and generates the key from 
challenge data and response data, the chal- 
lenge data being sent to the electronic device 
to check whether the electronic device is 
proper, and the response data being generated 
to show the authentication unit is proper. 

The semiconductor memory card of Claim 3, 
wherein 

the encrypted instruction sent from the elec- 
tronic device includes a tag field and an 
address field, the tag field not having been 
encrypted and specifying a type of an access 
to the authentication area, the address field 
having been encrypted and specifying an 
address of an area to be accessed, wherein 

the authentication area access control unit 
decrypts the address field using the key, and 
controls accesses by the electronic device to 
the authentication area so that an access of the 
type specified in the tag field is made to the 
area indicated by the address in the decrypted 
address field. 

The semiconductor memory card of Claim 4 further 
comprising: 

an identification data storage circuit which 
prestores identification data which is unique to 
the semiconductor memory card and enables 
the semiconductor memory card to be discrim- 
inated from other semiconductor memory 
cards, wherein 

the authentication unit performs a mutual 
authentication with the electronic device using 
the identification data stored in the identifica- 
tion data storage circuit, and generates the key 
from the identification data. 

The semiconductor memory card of Claim 1 further 
comprising: 

an area resizing circuit which resizes the 
authentication area and the non-authentication 
area. 

The semiconductor memory card of Claim 6, 
wherein 

the authentication area and the non-authenti- 
cation area are produced by dividing a continu- 
ous area of a predetermined size in the 
rewritable nonvolatile memory into two, and 
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the area resizing circuit resizes the authentica- 
tion area and the non-authentication area by 
changing an address marking a boundary 
between the authentication area and the non- 
authentication area. 

8. The semiconductor memory card of Claim 7, 
wherein 



9. The semiconductor memory card of Claim 8, 
wherein 



10. The semiconductor memory card of Claim 1 further 
comprising: 55 

a read-only memory circuit which prestores 
data. 



11. The semiconductor memory card of Claim 1, 
wherein 

each of the authentication area and the non- 
authentication area includes: 
a read/write storage area from/to which the 
electronic device can read/write data; and 
a read-only storage area from which the elec- 
tronic device can read data but to which the 
electronic device cannot write data, 
the control circuit further includes: 
a random number generator which generates a 
random number each time the electronic 
device writes data to the rewritable nonvolatile 
memory, and 

each of the authentication area access control 
unit and the non-authentication area access 
control unit encrypts data using the random 
number, writes the encrypted data to the 
read/write storage area, and writes the random 
number to the read-only storage area. 

12. The semiconductor memory card of Claim 1, 
wherein 

the control circuit further includes: 
a conversion table which shows correspond- 
ence between logical addresses and physical 
addresses in each of the authentication area 
and the non-authentication area; and 
a conversion table change circuit which 
changes contents of the conversion table in 
accordance with an instruction from the elec- 
tronic device, and 

the authentication area access control unit and 
the non-authentication area access control unit 
control accesses by the electronic device to the 
authentication area and the non-authentication 
area, respectively, by referring to the conver- 
sion table. 

13. The semiconductor memory card of Claim 1, 
wherein 

the control circuit further includes: 
an encryption/decryption unit which encrypts 
data to be written to the authentication area 
and the non-authentication area and decrypts 
data read out from the authentication area and 
the non-authentication area. 

14. The semiconductor memory card of Claim 1, 
wherein 

the nonvolatile memory is a flash memory, and 
the control circuit further includes: 
a not-deleted list read unit which, in accord- 
ance with an instruction from the electronic 



the area resizing circuit includes: 10 
an authentication area conversion table which 
shows correspondence between logical 
addresses and physical addresses in the 
authentication area; 

a no n -authentication area conversion table 15 
which shows correspondence between logical 
addresses and physical addresses in the non- 
authentication area; and 
a conversion table change unit which changes 
contents of the authentication area conversion 20 
table and the no n -authentication area conver- 
sion table in accordance with an instruction 
from the electronic device, wherein 
the authentication area access control unit con- 
trols accesses by the electronic device to the 25 
authentication area by referring to the authenti- 
cation area conversion table, and 
the n on -authentication area access control unit 
controls accesses by the electronic device to 
the non-authentication area by referring to the 30 
non-authentication area conversion table. 



an area addressed with higher physical 
addresses and an area addressed with lower 
physical addresses both constituting the area 
having the predetermined size are respectively 
allocated to the authentication area and the 40 
non-authentication area, 

the non-authentication area conversion table 
shows correspondence between logical 
addresses arranged in ascending order and 
physical addresses arranged in ascending 45 
order, and 

the authentication area conversion table shows 
correspondence between logical addresses 
arranged in ascending 

50 

order and physical addresses arranged in descend- 
ing order. 
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device, identifies not-deleted areas in the 
authentication area and the non-authentication 
area, and sends information indicating the not- 
deleted areas to the electronic device. 

5 

15. The semiconductor memory card of Claim 1, 
wherein 

the authentication unit requests a user of the 
electronic device to input a user key, which is 10 
information unique to the user, during the 
authentication process, and 
the control circuit further includes: 
a user key storage unit which stores the user 
key; 15 
an identification information storage unit which 
stores a piece of identification information iden- 
tifying an electronic device that has been 
affirmatively authenticated by the authentica- 
tion unit; and ^ 20 
a user key request prohibition unit which 
obtains a piece of identification information 
from a target electronic device after the authen- 
tication unit starts the authentication process, 
checks whether the piece of identification infor- 25 
mation obtained from the target electronic 
device has already been stored in the identifi- 
cation information storage unit, and prohibits 
the authentication unit from requesting a user 
of the electronic device to input a user key 30 
when the piece of identification information 
obtained from the target electronic device has 
already been stored in the identification infor- 
mation storage unit. 

35 

16. A data reading apparatus for reading out a digital 
content from the semiconductor memory card of 
Claim 1, the digital content having been stored in 
the non-authentication area of the semiconductor 
memory card, and information indicating the 40 
number of times the digital content can be read out 
being prestored in the authentication area, the data 
reading apparatus comprising: 

a judgement means for, when the digital con- 45 
tent is to be read out from the non-authentica- 
tion area, reading out the information indicating 
the number of times the digital content can be 
read out from the authentication area, and 
judging whether the digital content can be read so 
out based on the number of times indicated in 
the information; and 

a reproduction means for reading out the digital 
content from the non-authentication area only 
when the judgement means judges that the 55 
digital content can be read out, and reducing 
the number of times the digital content can be 
read out in the information stored in the authen- 



tication area. 

17. A data reading apparatus for reading out a digital 
content from the semiconductor memory card of 
Claim 1 and reproducing the read-out digital con- 
tent as an analog signal, the digital content, which 
can be reproduced as an analog signal, having 
been stored in the non-authentication area of the 
semiconductor memory card, and information indi- 
cating the number of times the digital content can 
be digitally output by the electronic device having 
been stored in the authentication area, the data 
reading apparatus comprising: 

a reproduction means for reading out the digital 
content from the n on -authentication area and 
reproducing the read-out digital content as an 
analog signal; 

a judgement means for reading out the infor- 
mation indicating the number of times the dig- 
ital content can be digitally output by the 
electronic device, and judging whether the dig- 
ital content can be digitally output based on the 
number of times indicated in the information; 
and 

a digital output means for digitally outputting 
the digital content only when the judgement 
means judges that the digital content can be 
digitally output, and reducing the number of 
times the digital content can be digitally output 
in the information stored in the authentication 
area. 
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